What we learnt from the UK Security Expo: for GDPR, education is the most effective weapon in your armoury